Walmart Is Scanning Shoppers’ License Plates Without Their Consent — California Law Says That Could Be Worth $2,500 Each

Walmart says it runs license plate cameras at its stores to fight theft. California law says that comes with a price tag: $2,500 per shopper if the retailer didn’t follow the state’s disclosure rules — whether or not any data was ever misused.

Every time you parked at a California Walmart, a camera may have quietly logged your license plate, the time, and the exact spot where you parked — building a record of your visits that you never agreed to. Emery | Reddy, PC is investigating potential privacy claims against Walmart on behalf of California shoppers who visited a Walmart store and had their license plate scanned by an automated license plate reader (ALPR) system. The investigation follows a February 2026 California appellate ruling that lets drivers recover statutory damages from any business that scanned their plate without maintaining and publicly posting a legally compliant ALPR policy, regardless of whether the data was ever shared or misused.

How Walmart’s Parking Lot Cameras Work

An automated license plate reader, or ALPR, is a camera system that reads a passing vehicle’s plate and turns it into searchable data using optical character recognition, software that converts an image of text into digital text a computer can store and search. Beyond the plate number, ALPR systems typically log the date, time, and exact location of each scan, along with details like a vehicle’s make, model, and color.

Walmart confirms it operates ALPR systems company-wide. According to Walmart’s own Automated License Plate Readers Privacy Notice, last updated February 16, 2026, the retailer uses the cameras “to help ensure security, prevent theft and fraud, assist with parking enforcement, and to help maintain the safety of individuals and properties.” Walmart’s notice states that plate data is retained for 60 days and may be disclosed whenever the company “believe[s] doing so will help protect the safety, property, or rights of individuals or Walmart” — a broad standard that does not specify which outside parties, including law enforcement agencies, may receive the data or how often.

California’s $2,500-Per-Person Law, Explained

California regulates private ALPR use through Civil Code Sections 1798.90.51 through 1798.90.55, often called the ALPR Privacy Act. The law requires any business operating ALPR cameras to:

• Adopt, maintain, and follow a written ALPR usage and privacy policy
• Make that policy publicly, and conspicuously, available
• Implement reasonable security measures to protect the data collected
• Limit use of the data to authorized, legitimate purposes
• Restrict and log any sharing of the data with third parties, including law enforcement

A California appellate court sharpened the stakes for this law on February 5, 2026. In Bartholomew v. Parking Concepts, Inc., the First District Court of Appeal ruled that a business’s failure to adopt and publicly post a compliant ALPR policy is, by itself, a legally actionable harm, even without any proof the data was ever misused, breached, or shared, according to reporting on the decision by litigation-analytics firm Rain Intelligence. The court’s rehearing was denied February 27, 2026. Under the statute, each violation carries a minimum of $2,500 in statutory damages per person.

That ruling has triggered a wave of California class actions against shopping malls, commercial campuses, and Flock Safety itself, with investigations reportedly expanding into retail chains, medical centers, and other commercial properties across the state, Rain Intelligence reported in May 2026. Whether Walmart’s current ALPR notice satisfies every element the statute requires, including truly restricting and logging law enforcement access, and whether that policy is posted at the physical camera locations as well as online, has not been tested in court.

How Flock’s Business Network Benefits Retailers — and Multiplies Who Sees a Shopper’s Plate

Flock Safety markets a feature called the Business Network, which the company says lets more than 1,000 participating companies, including four of the top ten U.S. retailers by revenue, share license plate and vehicle data with each other to investigate organized retail crime, according to Flock’s own marketing materials. Flock has publicized The Home Depot’s use of the network to help close a multi-state gift card fraud case, resulting in charges the company says exceeded $300,000 in losses.

It has not been publicly confirmed whether Walmart participates in Flock’s Business Network specifically. The network illustrates a broader point at the center of this investigation: the same tools that help retailers link theft cases across store locations also expand the pool of separate businesses that can access a shopper’s plate, timestamp, and location data, often without the shopper ever being told which companies received it.

Who Emery | Reddy Is Investigating This For

We’re prioritizing outreach to California shoppers who:

• Visited a physical Walmart store location in California — not an online order, pickup, or delivery order only
• Are not currently, and have never been, enrolled in Walmart+ or any other Walmart membership program
• Have a receipt or other proof of purchase showing the store location and date of the visit

What to Do If You Think You Qualify

• Find a receipt, order confirmation, or other proof of an in-person purchase at a California Walmart
• Note the store location and the date of your visit
• Confirm you have never signed up for Walmart+ or any other Walmart membership
• Submit your information to Emery | Reddy for a Free Case Review

Contact Emery | Reddy today for a Free Case Review if you shopped in person at a California Walmart, are not a Walmart member of any kind, and have a receipt to prove your visit.

Frequently Asked Questions

What is an automated license plate reader (ALPR)?

An ALPR is a camera system that reads passing vehicles’ license plates and converts them into searchable data. Many systems also record the date, time, and exact location of each scan, along with details about the vehicle itself.

Is this the same thing as a data breach?

No. This investigation is not about hacking or stolen data. It focuses on whether Walmart followed California’s specific disclosure and policy requirements for operating license plate cameras in the first place.

Do I have to prove my data was misused to have a claim?

No. Under California’s ALPR Privacy Act, a business’s failure to maintain and publicly post a compliant usage and privacy policy can itself support a claim for statutory damages, regardless of whether the data was ever shared, breached, or misused.

Why can’t Walmart+ or other Walmart members participate in this investigation?

We are currently prioritizing shoppers who are not enrolled in any Walmart membership program. If you are unsure whether a past membership affects your eligibility, contact us and we can help you figure out where you stand.

Why do I need a receipt?

A receipt or other proof of purchase helps confirm you physically visited a specific California Walmart location on a specific date, which supports the connection between you and that store’s ALPR cameras.

What if I don’t have my original receipt anymore?

Check your email for an order or purchase confirmation, or look for the transaction on a bank or credit card statement. Reach out to us and we can help you figure out what documentation might work.

What general risks come with license plate and location tracking?

License plate data tied to timestamps and locations can reveal a person’s daily routines, workplace, medical visits, or other patterns over time. California treats this kind of combined location data as especially sensitive because of how much it can reveal about a person’s life when collected repeatedly.

Has a lawsuit been filed against Walmart over this?

Not currently. Emery | Reddy is investigating potential claims and gathering information from affected California shoppers. Separate lawsuits have been filed against other companies, including Flock Safety and mall operators, over similar allegations.

Do I have a legal claim?

California businesses that operate license plate reader systems have a legal duty to maintain and publicly disclose a compliant usage and privacy policy before scanning shoppers’ plates. If Walmart did not meet that duty at the store where you shopped, you may have a claim worth pursuing. Contact Emery | Reddy, PC today for a Free Case Review — there is no fee unless we recover for you.